SolarWinds addressed four critical Web Help Desk flaws

2 weeks ago

SolarWinds patched six Web Help Desk vulnerabilities, including four critical flaws exploitable without authentication for RCE or auth bypass. SolarWinds…

Google targets IPIDEA in crackdown on global residential proxy networks

2 weeks ago

Google disrupted IPIDEA, a major residential proxy network that enrolled users’ devices via SDKs embedded in mobile and desktop apps.…

Nation-state and criminal actors leverage WinRAR flaw in attacks

2 weeks ago

Multiple threat actors exploited a now-patched critical WinRAR flaw to gain initial access and deliver various malicious payloads. Google Threat…

OpenSSL issued security updates to fix 12 flaws, including Remote Code Execution<gwmw style="display:none;"></gwmw>

2 weeks ago

OpenSSL released security updates that address 12 flaws, including a high-severity remote code execution vulnerability. OpenSSL issued security updates fixing…

U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog

3 weeks ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities…

Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)

3 weeks ago

Fortinet released fixes for a critical FortiOS SSO auth bypass (CVE-2026-24858) actively exploited, impacting FortiOS, FortiManager, and FortiAnalyzer. Fortinet started…

PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun

3 weeks ago

Koi researchers found “PackageGate” flaws in NPM, PNPM, VLT, and Bun that let attackers perform supply chain attacks and run…

WhatsApp rolls out Strict Account settings to strengthen protection for high-risk users

3 weeks ago

Meta announced new Strict Account Settings on WhatsApp to better protect high-risk users from advanced cyber attacks. Meta announced new…

Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed online

3 weeks ago

Shadowserver researchers found 6,000+ SmarterMail servers exposed online and likely vulnerable to a critical auth bypass flaw. Nonprofit security organization…

U.S. CISA adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

3 weeks ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known…

This website uses cookies.